CVE-2021-37209
published 2022-03-08CVE-2021-37209: A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8)…
PriorityP334medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.37%
29.5th percentile
A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS
Affected
74 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | ruggedcom_i800 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_i801 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_i802 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_i803 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_m2100 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_m2200 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_m969 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rmc30 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rmc8388_v4.x | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rmc8388_v5.x | < V5.7.0 | V5.7.0 |
| siemens | ruggedcom_rp110 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs1600 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs1600f | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs1600t | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs400 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs401 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs416 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs416p | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs416pv2_v4.x | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs416pv2_v5.x | < V5.7.0 | V5.7.0 |
| siemens | ruggedcom_rs416v2_v4.x | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs416v2_v5.x | < V5.7.0 | V5.7.0 |
| siemens | ruggedcom_rs8000 | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs8000a | < V4.3.8 | V4.3.8 |
| siemens | ruggedcom_rs8000h | < V4.3.8 | V4.3.8 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-283q-3r3x-g3rc: A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5
ghsa_unreviewed·2022-03-09
CVE-2021-37209 [MEDIUM] CWE-311 GHSA-283q-3r3x-g3rc: A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5
A vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS M2200 (All versions < V5.6.0), RUGGEDCOM ROS M969 (All versions < V5.6.0), RUGGEDCOM ROS RMC (All versions < V5.6.0), RUGGEDCOM ROS RMC20 (All versions < V5.6.0), RUGGEDCOM ROS RMC30 (All versions < V5.6.0), RUGGEDCOM ROS RMC40 (All versions < V5.6.0), RUGGEDCOM ROS RMC41 (All versions < V5.6.0), RUGGEDCOM ROS RMC8388 (All versions < V5.6.0), RUGGEDCOM ROS RP110 (All versions < V5.6.0), RUGGEDCOM ROS RS400 (All versions < V5.6.0), RUGGEDCOM ROS RS401 (All versions < V5.6.0), RUGGEDCOM ROS RS416 (All versions < V5.6.0), RUGGEDCOM ROS RS416v2 (All versions < V5.6.0), RUGGEDCOM ROS RS8000 (All versions < V5.6.0), RUGGEDCOM ROS RS8000A (All versions < V5.6.0), RUGGEDCOM ROS RS8000H (All versions <
CISA ICS
Siemens RUGGEDCOM Devices (Update D)
cisa_ics·2022-11-10
Siemens RUGGEDCOM Devices (Update D)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens RUGGEDCOM Devices (Update D)
Last RevisedDecember 15, 2022
Alert CodeICSA-22-069-01
## As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 6.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM Devices
- Vulnerability: Inadequate
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-03-08
Published